All Snow Inventory Agent 5 Settings with Detailed Explanations

Document created by marc.farmen Employee on Oct 5, 2017
Version 1Show Document
  • View in full screen mode

Configuration (top)

Root element of Snow inventory configuration file.
An element with minOccurs="0" that isn't presented in the xml file will have a Null value.
Every system shall have a default settings.xml file that decides what value should be the default if none is given.
The order the client should do this is to first read the default xml file and after that write over these values with the values in the users xml file.

<Configuration>   <Agent>...</Agent>   <Schedule>...</Schedule>   <Meter>...</Meter>   <Software>...</Software>   <Registry>...</Registry>   <Logging>...</Logging>   <Server>...</Server>   <DropLocation>...</DropLocation>   <Deny>...</Deny>   <Oracle>...</Oracle>   <SystemSettings>...</SystemSettings> </Configuration>

Attributes

None.

Child Elements

ElementDescription

Required element. 
Basic information about the agent deployment. Such a site and configuration name.

Optional element. Only applicable to the Windows Agent.
Schedule tasks to run on a recurring interval.

Optional element. Only applicable to the Windows Agent.
Metering rules.

Optional element.
Defines what should be included in the clients next scan.

Note software is always included from the following locations by default in the Windows operating system:
Windows, desktop, user profile, start menu and uninstall information (and running processes) when available.

Optional element. Only applicable to the Windows Agent.
Include additional information from the Windows Registry in the scan result.

Control the log output.

Required element. 
Specify server endpoints. Each endpoint represents a possible path for the agent to the server.

A drop location can be a folder, HTTP endpoint or UNC file path and specifies an additional delivery location for scan results. Only used when the agent normally sends the result to the server.

            Drop locations are not subject to retry policies, if a drop location does not receive the scan result (for any reason) the scan result will not be resent to that drop location at a later date.         

Optional element. Only applicable to the Windows Agent.

                  Deny rules exist to prevent certain programs to be run on the computer.         

Information used in the SIOS component for Oracle database inventory.

System settings that override the default behavior of the agent. Use with care.

Agent (top)

Required element. 
Basic information about the agent deployment. Such a site and configuration name.

<Agent>   <SiteName>...</SiteName>   <ConfigName>...</ConfigName> </Agent>

Attributes

None.

Child Elements

ElementDescription
SiteName

Required element. 
The name of the site that the agent belongs to. The site is used to identify the origin of the data files when transmitted to the server.

ConfigName

Required element. 
Name of configuration.

Schedule (top)

Optional element. Only applicable to the Windows Agent.
Schedule tasks to run on a recurring interval.

<Schedule enabled="...">   <Task>...</Task> </Schedule>

Attributes

AttributeDescription
enabled

Acceptable value: true or false

Child Elements

ElementDescription

List of tasks that the client should perform. Can be empty.

Task (top)

The task that will be run by the agent.

<Task>   <Action>...</Action>   <Occurance>...</Occurance>   <TimeOfDay>...</TimeOfDay>   <Randomize>...</Randomize> </Task>

Attributes

None.

Child Elements

ElementDescription
Action

Required element. 
Action to be performed

scan

Required element. 
Performs as scan of machine and sends the result back to server

Required element. 

TimeOfDay

Optional element.
Example: 09:10:30 All components (hh:mm:ss) are required!

Randomize

Optional element. Only applicable to daily, weekly and monthly schedule types.
The allowed maximum number of minutes offset from time of day when a scan should occur on schedule.
A grater value can help spread out the load on server infrastructure as it is unlikey that many agents will then report back simultaneously.

Occurance (top)

How often to stage a certain task.

<Occurance>   <AtStart>...</AtStart>   <AtLogOn>...</AtLogOn>   <Daily>...</Daily>   <Weekly>...</Weekly>   <Monthly>...</Monthly> </Occurance>

Attributes

None.

Child Elements

ElementDescription

Required element. 
Will stage task at start of Agent (service init).

Required element. 
Will stage task when a user of the system have logged on.

Daily

Optional element. If used values: true/false
Do the action on a daily basis.

Weekly

Optional element.
Do the action on a weekly basis. Multiple days can be chosen. Allowed values: monday tuesday wednesday thursday friday saturday sunday

monday
tuesday
wednesday
thursday
friday
saturday
sunday
Monthly

Optional element.
The day of month the task will be executed.
If the day of the month is outside the range of that month, run action the last day in that month.
For example in February this would become the 28th or 29th.
Example: 30

AtStart (top)

Required element. 
Will stage task at start of Agent (service init).

<AtStart delay="..." atMostOnceDaily="..." />

Attributes

AttributeDescription
delay

Optional element. If used values: true/false

atMostOnceDaily

Optional element. If used values: true/false

Child Elements

None.

AtLogOn (top)

Required element. 
Will stage task when a user of the system have logged on.

<AtLogOn delay="..." atMostOnceDaily="..." />

Attributes

AttributeDescription
delay

Optional element. If used values: true/false

atMostOnceDaily

Optional element. If used values: true/false

Child Elements

None.

Meter (top)

Optional element. Only applicable to the Windows Agent.
Metering rules.

<Meter enabled="...">   <Exclude>...</Exclude>   <Span>...</Span>   <Occurance>...</Occurance> </Meter>

Attributes

AttributeDescription
enabled

Acceptable value: true/false

Child Elements

ElementDescription

Optional element.
Specifies what software should be excluded from scan.

Required element. 
Time span for metering.

Required element. 
List of days when metering should be done.

Exclude (top)

Optional element.
Specifies what software should be excluded from scan.

<Exclude>   <Path>...</Path> </Exclude>

Attributes

None.

Child Elements

ElementDescription
Path

Optional element
Exclude software based on a set of simple string matching rules.

 

For example:
- *.dll exclude all software that ends with the .dll extension
- C:\Windows\* exclude all software that is run from the C:\Windows directory

Note that exclusion does not impact unconditional include paths.

Span (top)

<Span>   <StartTime>...</StartTime>   <EndTime>...</EndTime> </Span>

Attributes

None.

Child Elements

ElementDescription
StartTime

Required element. 
Example: 09:10:30 All components (hh:mm:ss) are required!

EndTime

Required element. 
Example: 09:10:30 All components (hh:mm:ss) are required!

Occurance (top)

<Occurance>   <Weekday>...</Weekday> </Occurance>

Attributes

None.

Child Elements

ElementDescription
Weekday

Optional element.
Specify day(s) that metering will occur on.

monday
tuesday
wednesday
thursday
friday
saturday
sunday

Software (top)

Optional element.
Defines what should be included in the clients next scan.

Note software is always included from the following locations by default in the Windows operating system:
Windows, desktop, user profile, start menu and uninstall information (and running processes) when available.

<Software>   <Include>...</Include>   <IncludeCriteria>...</IncludeCriteria>   <Exclude>...</Exclude> </Software>

Attributes

None.

Child Elements

ElementDescription

Optional element.
Specifies what software should be included in scan based on file system locations.

Optional element.
Additional criteria that must be fulfilled for software to be included in the result.
For each type of criteria, at least one (if any) of the criterias must match.
For example, if multiple extensions have been specified it's enough if one extension matches but if extensions and manufacturers have both been specified there has to be at least one matching extension and manufacturer.

Optional element.
Specifies what software should be excluded from scan.

Include (top)

Optional element.
Specifies what software should be included in scan based on file system locations.

<Include>   <LocalDisk>...</LocalDisk>   <Path>...</Path> </Include>

Attributes

None.

Child Elements

ElementDescription
LocalDisk

Optional element. Only applicable to the Windows Agent.
If specified include software information from any locally attached (or mounted) disk.

Note that unless any exclude paths have been specified a complete file system scan will take place. It could take a while... and impact system performance for the duration of the scan. Acceptable value: true or false

Each path is a search expression that is used to locate software based on the file system information.

Path (top)

Each path is a search expression that is used to locate software based on the file system information.
For example:
- C:\Windows\* matches all files located in the C:\Windows directory
- C:\Windows\*.log matches all .log files located in the C:\Windows directory

<Path recursive="..." unconditionally="..." />

Attributes

AttributeDescription
recursive

Optional element. If used values: true/false
Specifies whether to use the path to search recursively for files.
For example when recursive=true:
- C:\Windows\*.log matches all .log files located in the C:\Windows directory and all sub directories.

                      Acceptable value:             true or false         
unconditionally

Optional element. If used values: true/false
Specifies whether to include the files found regardless of any exclusion filter.

                      Acceptable value:             true or false         

Child Elements

None.

IncludeCriteria (top)

Optional element.
Additional criteria that must be fulfilled for software to be included in the result.
For each type of criteria, at least one (if any) of the criterias must match.
For example, if multiple extensions have been specified it's enough if one extension matches but if extensions and manufacturers have both been specified there has to be at least one matching extension and manufacturer.

<IncludeCriteria enabled="...">   <Manufacturer>...</Manufacturer>   <FileSystem>...</FileSystem>   <FileType>...</FileType> </IncludeCriteria>

Attributes

AttributeDescription
enabled

Acceptable value: true/false

Child Elements

ElementDescription
Manufacturer

Only applicable to the Windows Agent. Optional element. May be specified multiple times.
If software is to be included it must match at least one manufacturer filter.

NOTE: The manufacturer criteria can only be applied if the manufacturer can be determined.

FileSystem

Optional element. May be specified multiple times. Only applicable to UNIX agent.
If scanning for software reaches a directory that is a mount point the scanning will not continue scanning the directory further if the file system isn't listed.
Example: jsf

FileType

Optional element. May be specified multiple times.
If software is to be included it must match one of the file types specified.
Uses wildcard matching.
Example for Linux, OSX & Unix systems: ELF*executable* Example for Windows systems: sys2

Exclude (top)

Optional element.
Specifies what software should be excluded from scan.

<Exclude>   <Path>...</Path>   <FileSystem>...</FileSystem> </Exclude>

Attributes

None.

Child Elements

ElementDescription
Path

Optional element. May be specified multiple times. Only applicable to the Windows Agent.
Exclude software based on a set of simple string matching rules.
For example:
- *.dll exclude all software that ends with the .dll extension
- C:\Windows\* exclude all software that is run from the C:\Windows directory

Note that exclusion does not impact unconditional include paths.

FileSystem

Optional element. May be specified multiple times. Only applicable to the POSIX Agents.
If software is to be excluded based on file system type.

Registry (top)

Optional element. Only applicable to the Windows Agent.
Include additional information from the Windows Registry in the scan result.

<Registry enabled="...">   <Query>...</Query> </Registry>

Attributes

AttributeDescription
enabled

Acceptable value: true/false

Child Elements

ElementDescription

Represents a registry query.

Query (top)

Represents a registry query (Windows specific). The query will be used to search for a set of values that will be included as custom registry information in the scan result.

<Query>   <Key>...</Key>   <Value>...</Value> </Query>

Attributes

None.

Child Elements

ElementDescription

Required element. 
The sub key (and registry hive) to scan.
Example: HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows NT

Value

Required element. May be specified multiple times.
Each value represents the name of a value and if found at any location during query will result in that value being included in the scan result. Example: Version

Key (top)

Required element. 
The sub key (and registry hive) to scan.
Example: HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows NT

<Key recursive="..." />

Attributes

AttributeDescription
recursive

Optional element. If used values: true/false
Specifies whether to perform a recursive search starting at the sub key specified.

Note that it may take considerable time to perform a recursive scan, if the starting point is a key with many items underneath it. Use recursive queries sparsely. Acceptable value: true/false

Child Elements

None.

Logging (top)

Control the log output.

<Logging>   <MaxSize>...</MaxSize>   <Level>...</Level>   <Tag>...</Tag>   <Syslog>...</Syslog> </Logging>

Attributes

None.

Child Elements

ElementDescription
MaxSize

Optional element.
Maximum allowed file size of the log file in KiB.

Level

Optional element.
Specify log level. Each log level includes the preceeding log level.

error
warning
info
trace
verbose
Tag

Optional element.
Enable tagged log output. Tagged log output represents logging of a specific type or source and log independently of any log level set.
Some tags (such as the metering tag) are very verbose and should only be enabled during troubleshooting of any metering related issue.
The following is a complete list of supported tags:
- privop (privileged operation). All external commands that run with any form of elevation (administrative access rights) are logged with this tag.
- metering Verbose logging about current software metering.

Optional element. Only applicable to the POSIX Agent.
Control the syslog output.

Syslog (top)

Optional element. Only applicable to the POSIX Agent.
Control the syslog output.

<Syslog>   <Level>...</Level>   <Tag>...</Tag> </Syslog>

Attributes

None.

Child Elements

ElementDescription
Level

Optional element.
Specify log level. Each log level includes the preceeding log level.

error
warning
info
trace
verbose
Tag

Optional element.
Enable tagged log output. Tagged log output represents logging of a specific type or source and log independently of any log level set.
Some tags (such as the metering tag) are very verbose and should only be enabled during troubleshooting of any metering related issue.
The following is a complete list of supported tags:
- privop (privileged operation). All external commands that run with any form of elevation (administrative access rights) are logged with this tag.
- metering Verbose logging about current software metering.

Server (top)

Specify server endpoints. Each endpoint represents a possible path for the agent to the server.

Remarks 
When establishing a connection to the server the agent simply choses an endpoint randomly from the list of available endpoints until each endpoint has been atempted at least once before giving up. The first endpoint that results in a successfull connection will be used for the remainder of the session.

<Server>   <Endpoint>...</Endpoint> </Server>

Attributes

None.

Child Elements

ElementDescription

Required element. May be specified multiple times.
A server endpoint that the agent will use to connect to the server infrastructure.

Endpoint (top)

<Endpoint>   <Address>...</Address>   <Proxy>...</Proxy>   <ClientCertificate>...</ClientCertificate> </Endpoint>

Attributes

None.

Child Elements

ElementDescription
Address

Required element. 
Specify the server URI in the following format: scheme://hostname:port/. supported URI schemes are http and https.

Optional element.
Proxy settings to use for this endpoint. If proxy settings are not specified any proxy server support is explicitly disabled for this endpoint.

Optional element.
The client certificate used to secure the connection between agent and server.

Proxy (top)

Optional element.
Proxy settings to use for this endpoint. If proxy settings are not specified any proxy server support is explicitly disabled for this endpoint.

<Proxy>   <Server>...</Server>   <Credentials>...</Credentials> </Proxy>

Attributes

None.

Child Elements

ElementDescription
Server

Required element. 
Specify the address for this proxy server.

Optional element.
Credentials used to authenticate connection with HTTP proxy server.

NOTE: Only basic authentication is supported.

Credentials (top)

Optional element.
Credentials used to authenticate connection with HTTP proxy server.

NOTE: Only basic authentication is supported.

<Credentials>   <UserName>...</UserName>   <Password>...</Password> </Credentials>

Attributes

None.

Child Elements

ElementDescription
UserName
Password

Note that the password is always stored in an encrypted form.

ClientCertificate (top)

Optional element.
The client certificate used to secure the connection between agent and server.

<ClientCertificate>   <FileName>...</FileName>   <Password>...</Password> </ClientCertificate>

Attributes

None.

Child Elements

ElementDescription
FileName

The file name of a client certificate to use (relative the current installation location).

Password

The password to use if the client certificate has been password protected.
Note that the password is always stored in an encrypted form.

DropLocation (top)

A drop location can be a folder, HTTP endpoint or UNC file path and specifies an additional delivery location for scan results. Only used when the agent normally sends the result to the server.

        Drop locations are not subject to retry policies, if a drop location does not receive the scan result (for any reason) the scan result will not be resent to that drop location at a later date.     
<DropLocation>   <Network>...</Network>   <Path>...</Path>   <Endpoint>...</Endpoint> </DropLocation>

Attributes

None.

Child Elements

ElementDescription

Optional element. May be specified multiple times. Only applicable to the Windows Agent.

Path

Optional element. May be specified multiple times. Example: \server\folder

Network (top)

<Network>   <Credentials>...</Credentials>   <Location>...</Location> </Network>

Attributes

None.

Child Elements

ElementDescription

Credentials to use when connecting to a network share as a specific user.

Location

Credentials (top)

Credentials to use when connecting to a network share as a specific user.

<Credentials>   <Domain>...</Domain>   <UserName>...</UserName>   <Password>...</Password> </Credentials>

Attributes

None.

Child Elements

ElementDescription
Domain
UserName
Password

Endpoint (top)

<Endpoint>   <Address>...</Address>   <Proxy>...</Proxy>   <ClientCertificate>...</ClientCertificate> </Endpoint>

Attributes

None.

Child Elements

ElementDescription
Address

Required element. 
Specify the server URI in the following format: scheme://hostname:port/. supported URI schemes are http and https.

Optional element.
Proxy settings to use for this endpoint. If proxy settings are not specified any proxy server support is explicitly disabled for this endpoint.

Optional element.
The client certificate used to secure the connection between agent and server.

Proxy (top)

Optional element.
Proxy settings to use for this endpoint. If proxy settings are not specified any proxy server support is explicitly disabled for this endpoint.

<Proxy>   <Server>...</Server>   <Credentials>...</Credentials> </Proxy>

Attributes

None.

Child Elements

ElementDescription
Server

Required element. 
Specify the address for this proxy server.

Optional element.
Credentials used to authenticate connection with HTTP proxy server.

NOTE: Only basic authentication is supported.

Credentials (top)

Optional element.
Credentials used to authenticate connection with HTTP proxy server.

NOTE: Only basic authentication is supported.

<Credentials>   <UserName>...</UserName>   <Password>...</Password> </Credentials>

Attributes

None.

Child Elements

ElementDescription
UserName
Password

Note that the password is always stored in an encrypted form.

ClientCertificate (top)

Optional element.
The client certificate used to secure the connection between agent and server.

<ClientCertificate>   <FileName>...</FileName>   <Password>...</Password> </ClientCertificate>

Attributes

None.

Child Elements

ElementDescription
FileName

The file name of a client certificate to use (relative the current installation location).

Password

The password to use if the client certificate has been password protected.
Note that the password is always stored in an encrypted form.

Deny (top)

Optional element. Only applicable to the Windows Agent.

              Deny rules exist to prevent certain programs to be run on the computer.     
<Deny enabled="...">   <Rule>...</Rule> </Deny>

Attributes

AttributeDescription
enabled

Acceptable value: true or false

Child Elements

ElementDescription

Optional element. May be specified multiple times.

                  Specify a deny rule. Each condition must match in other for the rule to apply. Wildcards are allowed.         

Rule (top)

Optional element. May be specified multiple times.

              Specify a deny rule. Each condition must match in other for the rule to apply. Wildcards are allowed.     
<Rule>   <Path>...</Path>   <CompanyName>...</CompanyName>   <FileDescription>...</FileDescription> </Rule>

Attributes

None.

Child Elements

ElementDescription
Path

Match full path of the executing binary.

CompanyName

Match the CompanyName from metadata embedded in the binary.

FileDescription

Deny application based on file description presented to users (as specified in metadata, specifically FileDescription).

Oracle (top)

Information used in the SIOS component for Oracle database inventory.

<Oracle enabled="...">   <Environment>...</Environment>   <DefaultInstanceCredentials>...</DefaultInstanceCredentials>   <Oratab>...</Oratab>   <InstancesWithConfiguration>...</InstancesWithConfiguration>   <Include>...</Include>   <Exclude>...</Exclude> </Oracle>

Attributes

AttributeDescription
enabled

Acceptable value: true/false

Child Elements

ElementDescription

Credentials used in all oracle scans if there is no specific credentials for a SID. May be left out if automatic scan is used or instance specific credentials are entered.

Oratab

Specifies the location of the Oratab file to be used to read ORACLE HOME from. This setting is overridden by an OracleHome-element in the Instance-element.

List of what should be included in the Oracle database scan.

List of what should be excluded from the Oracle database scan.

Environment (top)

<Environment>   <Item>...</Item> </Environment>

Attributes

None.

Child Elements

ElementDescription

Specifies a single environment variable to be set.

Item (top)

Specifies a single environment variable to be set.

<Item variable="..." value="..." />

Attributes

AttributeDescription
variable
value

Child Elements

None.

DefaultInstanceCredentials (top)

<DefaultInstanceCredentials UseTNS="...">   <UserName>...</UserName>   <Password>...</Password> </DefaultInstanceCredentials>

Attributes

AttributeDescription
UseTNS

Child Elements

ElementDescription
UserName
Password

InstancesWithConfiguration (top)

<InstancesWithConfiguration>   <Instance>...</Instance> </InstancesWithConfiguration>

Attributes

None.

Child Elements

ElementDescription

Instance (top)

Defines the SID and can also contain credentials for the SID. You can also point to an Oracle home path.

<Instance>   <SID>...</SID>   <Credentials>...</Credentials>   <OracleHome>...</OracleHome>   <Environment>...</Environment>   <UnixUser>...</UnixUser> </Instance>

Attributes

None.

Child Elements

ElementDescription
SID

Optional element.

OracleHome

Optional. Path to the Oracle home directory. Used if the scanner can’t find the path automatically.

UnixUser

Credentials (top)

<Credentials UseTNS="...">   <UserName>...</UserName>   <Password>...</Password> </Credentials>

Attributes

AttributeDescription
UseTNS

Child Elements

ElementDescription
UserName
Password

Environment (top)

<Environment>   <Item>...</Item> </Environment>

Attributes

None.

Child Elements

ElementDescription

Specifies a single environment variable to be set.

Item (top)

Specifies a single environment variable to be set.

<Item variable="..." value="..." />

Attributes

AttributeDescription
variable
value

Child Elements

None.

Include (top)

List of what should be included in the Oracle database scan.

<Include>   <AllInstances>...</AllInstances>   <Instance>...</Instance>   <RawData>...</RawData> </Include>

Attributes

None.

Child Elements

ElementDescription
AllInstances

True if all instances should be found and scanned.

RawData

Deliver Oracle Raw Data as a complement to the normal data.

Instance (top)

Defines the SID and can also contain credentials for the SID. You can also point to an Oracle home path.

<Instance>   <SID>...</SID>   <Credentials>...</Credentials>   <OracleHome>...</OracleHome>   <Environment>...</Environment>   <UnixUser>...</UnixUser> </Instance>

Attributes

None.

Child Elements

ElementDescription
SID

Optional element.

OracleHome

Optional. Path to the Oracle home directory. Used if the scanner can’t find the path automatically.

UnixUser

Credentials (top)

<Credentials UseTNS="...">   <UserName>...</UserName>   <Password>...</Password> </Credentials>

Attributes

AttributeDescription
UseTNS

Child Elements

ElementDescription
UserName
Password

Environment (top)

<Environment>   <Item>...</Item> </Environment>

Attributes

None.

Child Elements

ElementDescription

Specifies a single environment variable to be set.

Item (top)

Specifies a single environment variable to be set.

<Item variable="..." value="..." />

Attributes

AttributeDescription
variable
value

Child Elements

None.

Exclude (top)

List of what should be excluded from the Oracle database scan.

<Exclude>   <Instance>...</Instance> </Exclude>

Attributes

None.

Child Elements

ElementDescription

Instance (top)

Defines the SID and can also contain credentials for the SID. You can also point to an Oracle home path.

<Instance>   <SID>...</SID>   <Credentials>...</Credentials>   <OracleHome>...</OracleHome>   <Environment>...</Environment>   <UnixUser>...</UnixUser> </Instance>

Attributes

None.

Child Elements

ElementDescription
SID

Optional element.

OracleHome

Optional. Path to the Oracle home directory. Used if the scanner can’t find the path automatically.

UnixUser

Credentials (top)

<Credentials UseTNS="...">   <UserName>...</UserName>   <Password>...</Password> </Credentials>

Attributes

AttributeDescription
UseTNS

Child Elements

ElementDescription
UserName
Password

Environment (top)

<Environment>   <Item>...</Item> </Environment>

Attributes

None.

Child Elements

ElementDescription

Specifies a single environment variable to be set.

Item (top)

Specifies a single environment variable to be set.

<Item variable="..." value="..." />

Attributes

AttributeDescription
variable
value

Child Elements

None.

SystemSettings (top)

System settings that override the default behavior of the agent. Use with care.

<SystemSettings>   <Setting>...</Setting> </SystemSettings>

Attributes

None.

Child Elements

ElementDescription

Setting (top)

<Setting key="..." value="..." />

Attributes

AttributeDescription
key

The name of a system setting to set to some value. Acceptable values depend on the type of setting. See remarks about each setting for more information.

privacy.hide_user

Replace the user name (anywhere present) with SHA-1 hash of the user name (UTF-8 byte representation). Only applicable to the Windows and POSIX Agents.

privacy.hide_ip

Replace the IP addrees (anywhere present) with SHA-1 hash of the IP address (UTF-8 byte representation). Only applicable to the Windows and POSIX Agents.

env.allowonlyonescanperday

Only applicable to the Linux and OS X Agent. 
If set, only one scan per day will be allowed by the agent.
Acceptable value: true/false

env.emulate_os

For Snow internal use only. 
Used in SIAU. This value will decide what operating system and hardware will be used.
It is the filename that is derived from this value that decides type of system.
All mock files are placed in a directory named mockfiles.
In that directory files named: mockfile*emulatedos_operation* are placed and read
instead of the corresponding operating system command.

env.java_home

If path to java can't be found or an incompatible version is set as default, this value can be used to identify a correct version.

env.shell

Used as a solution to problems with the standard shell installed. Points to a shell.
Example: /bin/bash

env.data_dir

If specified, overrides the directory in which the agent will store data files, such as scan results and metering (when applicable).
Defaults to a sub directory 'data' from where the agent is run.
The agent must have read and write access to this directory.

env.temp_dir

If specified, overrides the directory where the agent will store temporary data files.
Defaults to system default temporary directory.
The agent must have read and write access to this directory.

env.log_dir

If specified, overrides the default log directory where the agent will store log files.
Defaults to a sub directory 'data' from where the agent is run.
The agent must have read and write access to this directory.

http.ssl_verify

If false, the agent will not verify that any certificate used to secure communication is issued by a trusted certificate authority (CA).
This setting is enabled by default and must be explicitly disabled if necessary.
Acceptable value: true/false

http.ssl_capath

Specify file holding CA certificate(s).
Example: /etc/ssl/certs/mycert.crt

log.append

If true the agent will append log data and not delete the log after putting it in the snowpack which is the default behavior.
Acceptable value: true/false

software.scan.dpkg

Include information from the Debian package manager about installed software.
Acceptable value: true/false

software.scan.jar

Enable software scan by scanning the metadata found in Java Archive (JAR) files.
Acceptable value: true/false

software.scan.rpm

Include information from the Red Hat package manager about installed software.
Acceptable value: true/false

software.scan.ips

Include information from the Image Packaging System (IPS). Applicable to Solaris 11 and later.
Acceptable value: true/false

software.scan.svr4

Include information from SVR4 packages. Applicable to Solaris 10 and previous versions.
Acceptable value: true/false

software.scan.lpp

Include information from Licensed Program Products. Applicable to AIX systems.
Acceptable value: true/false

software.scan.sd

Include information from Software Distributor. Applicable to HP-UX systems.
Acceptable value: true/false

software.scan.running_processes

Lists all file types found when doing software scanning on running processes.
Acceptable value: true/false

software.scan.add_latency

Defined in microseconds. When reading or processing large amounts of data/objects,
add some extra latency between the objects to prevent the system from spending too much resource on this process.
This might also be a good solution when scanning exceptionally fast drives, to keep the CPU usage down

software.scan.enabled

Only applicable to the Windows Agent. 

                         If disabled will override all software.scan.* settings<br/>         Acceptable value:             true/false              
software.scan.swidtags

Only applicable to the Windows Agent. 

                       Disable or enable scanning of swid tags<br/>         Acceptable value:             true/false              
hardware.scan.enabled

Only applicable to the Windows Agent. 

                       Disable or enable scanning of hardware, this will override any individual hardware.scan.* setting.<br/>         Acceptable value:             true/false              
hardware.scan.device

Only applicable to the Windows Agent.

                       Disable or enable scanning of installed device drivers<br/>         Acceptable value:             true/false              
hardware.scan.networkadapter

Only applicable to the Windows Agent.

                       Disable or enable scanning of network adapters<br/>         Acceptable value:             true/false              
software.scan.userscan

Only applicable to the Windows Agent. 

                       If disabled will override: software.scan.environmentvariables, software.scan.fileshare, hardware.scan.printer<br/>         Acceptable value:             true/false              
software.scan.environmentvariables

Only applicable to the Windows Agent.

                       Disable or enable scanning of environment variables<br/>         Acceptable value:             true/false              
software.scan.fileshare

Only applicable to the Windows Agent.

                       Disable or enable scanning of network shares<br/>         Acceptable value:             true/false              
hardware.scan.printer

Only applicable to the Windows Agent.

                       Disable or enable scanning of printers that are setup on the system<br/>         Acceptable value:             true/false              
hardware.scan.displayadapter

Only applicable to the Windows Agent.

                       Disable or enable scanning of inistalled display adapter<br/>         Acceptable value:             true/false              
hardware.scan.expansionslot

Only applicable to the Windows Agent.

                       Legacy support<br/>         Acceptable value:             true/false              
software.scan.fonts

Only applicable to the Windows Agent.

                       Disable or enable scanning of installed fonts<br/>         Acceptable value:             true/false              
hardware.scan.keyboard

Only applicable to the Windows Agent.

                       Disable or enable scanning of attached keyboard<br/>         Acceptable value:             true/false              
hardware.scan.logicaldisk

Only applicable to the Windows Agent.

                       Disable or enable scanning of logical drives attached<br/>         Acceptable value:             true/false              
software.scan.loginuser

Only applicable to the Windows Agent.

                       Disable or enable scanning of user login history<br/>         Acceptable value:             true/false              
hardware.scan.memory

Only applicable to the Windows Agent.

                       Disable or enable scanning of memory<br/>         Acceptable value:             true/false              
hardware.scan.modem

Only applicable to the Windows Agent.

                       Disable or enable scanning of attached modems<br/>         Acceptable value:             true/false              
hardware.scan.monitor

Only applicable to the Windows Agent.

                       Disable or enable scanning of attached screen<br/>         Acceptable value:             true/false              
hardware.scan.mouse

Only applicable to the Windows Agent.

                       Disable or enable scanning of attached mouse device<br/>         Acceptable value:             true/false              
hardware.scan.multimedia

Only applicable to the Windows Agent.

                       Disable or enable scanning of installed media devices, i.e sound card.<br/>         Acceptable value:             true/false              
software.scan.netclient

Only applicable to the Windows Agent.

                       Disable or enable scanning of network clients or network services<br/>         Acceptable value:             true/false              
software.scan.netprotocol

Only applicable to the Windows Agent.

                       Disable or enable scanning ofNDIS protocols CoNDIS stand-alone call managers<br/>         Acceptable value:             true/false              
software.scan.ntservice

Only applicable to the Windows Agent.

                       Disable or enable scanning of services<br/>         Acceptable value:             true/false              
software.scan.odbc

Only applicable to the Windows Agent.

                       Disable or enable scanning of ODBC data sources and related drivers<br/>         Acceptable value:             true/false              
hardware.scan.pci

Only applicable to the Windows Agent.

                       Disable or enable scanning of pci devices<br/>         Acceptable value:             true/false              
hardware.scan.physicaldisk

Only applicable to the Windows Agent.

                       Disable or enable scanning of attached physical disks<br/>         Acceptable value:             true/false              
hardware.scan.port

Only applicable to the Windows Agent.

                       Disable or enable scanning of COM and LPT ports on the computer<br/>         Acceptable value:             true/false              
hardware.scan.processor

Only applicable to the Windows Agent.

                       Disable or enable scanning of processor<br/>         Acceptable value:             true/false              
hardware.scan.scsi

Only applicable to the Windows Agent.

                       Disable or enable scanning of SCSI devices<br/>         Acceptable value:             true/false              
hardware.scan.tapedrive

Only applicable to the Windows Agent.

                       Disable or enable scanning of attached tape drives<br/>         Acceptable value:             true/false              
hardware.scan.usb

Only applicable to the Windows Agent.

                       Disable or enable scanning of usb devices<br/>         Acceptable value:             true/false              
software.scan.custominfo

Only applicable to the Windows Agent. 

                       Currently "Custom reg keys" within the "default behaviour" concept.<br/>         Acceptable value:             true/false              
software.scan.virtualsoftwareinfo

Only applicable to the Windows Agent.

                       Disable or enable scanning of virtual software<br/>         Acceptable value:             true/false              
metering.is_enabled

Only applicable to the Windows Agent. 

                       Enable or disable metering.<br/>         Acceptable value:             true/false              
send.max_scan_result_backlog_count

Whenever a send failure occurs the scan result is keept (locally) until the next send opportunity.
This setting controls the maximum number of results that can be kept around at any given time.
When this limit is reached, the oldest result is delete until the number of scan results are within the allowed limit.
Default value: 90

env.powershell_timeout

The time in milliseconds we wait for all powershell scripts to finish. Note, this is for whole session not individual scripts.

http.poll_interval

Only applicable to the Windows Agent. 
The interval in seconds between heartbeats.
A heartbeat is a check to see if there are any pending commands to be carried out at this moment.
For example, agent updates. The interval must be between 2 seconds and 3 days otherwise the default value of 5400 seconds (90 minutes) is used.

http.poll_variance

Only applicable to the Windows Agent. 
The variance in seconds for heartbeats.
The variance control how many seconds off the interval is allowed per heartbeat.
Greater variance means more evenly distributed load.
The variance must be between 1 second and the interval. Otherwise the default value of 1800 seconds (30 minutes) is used.

wmi.poll_interval

Only applicable to the Windows Agent. 
The interval that Windows Management Instrumentation (WMI) uses to poll the data provider for intrinsic events.
Default is 15 seconds. A higher poll interval may be useful in Virtual Desktop Infrastructure environments.
See https://msdn.microsoft.com/en-us/library/aa394527(v=vs.85).aspx for more information.

env.is_virtual_desktop_infrastructure

Only applicable to the Windows Agent. 
If the agent is running in a virtual desktop infrastructure this setting should be set to true.
See https://msdn.microsoft.com/en-us/library/aa394527(v=vs.85).aspx for more information.
Acceptable value: true/false

idx.endpoint

Only applicable to the Windows Agent. 
The data exchange end point to use for web application patterns.

snowpack.encryption_fingerprint

The fingerprint of the encryption key to use for encrypting Snowpacks. Note: You must also place the crypt key file in the folder specified by snowpack.encryption_path.

snowpack.encryption_path

The path to where the encryption keys are stored. This setting is optional. If not present, the path to the agent itself will be used.

value

The value associated with the setting. Note that the format of this value will vary depending on the type of setting. See remarks about each setting for more information.

Child Elements

None.

11 people found this helpful

Attachments

    Outcomes